Can't compel a password out of someone in the US, but biometrics can be. Pins win in my book, but if someone wants to use it, why not have the option? 🤷‍♀️